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DETAILED ACTION 

The amendment filed on 8/13/2007 has been entered. The examiner 
notes that claims 20-25 are pending for examination and further 
have been amended and claims 1-19 have been cancelled. The 
examiner establishes new grounds of rejection; therefore this 
action is made final. 

Response to Arguments 

Applicant's arguments with respect to claims 20-25 have been 
considered but are moot in view of the new ground (s) of 
re j ection . 

Claim Rejections - 35 USC §103 

The text of those sections of Title 35, U.S. Code not included 
in this action can be found in a prior Office action. 

Claims 20-23 and 25 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Gryglewicz et al . (US 6,993,052 Bl) in view of 
Traversat et al . (US 2002/0147771 Al). 
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Claim 20 

Gryglewicz et al . teaches wherein the web-based tax service 
includes tax identification, tax computation, tax collection, 
tax remittance and tax reporting for audit servers (Gryglewicz 
et al . , see at least, col. 5, lines 46-67; col. 6, lines 1-7; 
col. 8, lines 19-53). 

Claim 21 

Gryglewicz et al . discloses a plurality of servers (Gryglewicz 
et al . , see at least, col. 5, lines 46-55) connected to the 
public network (Gryglewicz et al . , see at least, col. 5, lines 
46-55) for providing a public web-based tax service that allows 
merchant subscribers to accumulate tax information, wherein 
different functions of the tax service are performed by 
different servers (Gryglewicz et al . , see at least, col. 5, 
lines 46-67; col. 6, lines 1-7; col. 8, lines 19-53); and means 
for providing security for information on the servers and 
information during transmission over the public network between 
the servers (Gryglewicz et al . , see at least, col. 15, lines 12- 
18) . 

Gryglewicz et al . fails to specifically disclose the 
security means including managed firewalls for preventing 
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unwanted data from being entered into the system while data is 
being transmitted between subscribers and the servers. 

Traversat et al . discloses a peer group that can include a 
firewall handling and limited security (Traversat et al . , see at 
least, [0082]) and the ability for firewalls to subdivide the 
network into secure regions without altering the physical 
network boundary (Traversat et al . , see at least, [0128] : the 
examiner notes to represent the ability to manage a firewall 

(e.g. ability to subdivide the network)) and the firewall 
restricting entry into virtual private network unless authorized 

((Traversat et al . , see at least, [0440]: the examiner notes 
this to protect the data being transmitted within the firewall 
boundaries) . 

Therefore, it would have been obvious to one of ordinary 
skill in the art at the time the invention was made to modify 
the teachings of Gryglewicz et al . to include a firewall 
handling and limited security and the ability for firewalls to 
subdivide the network into secure regions without altering the 
physical network boundary and the firewall restricting entry 
into virtual private network unless authorized as taught by 
Traversat et al . One of ordinary skill in the art would have 
been motivated to combine the teachings in order to include a 
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firewall that can handle limited security (Traversat et al . , see 
at least, [0082] ) . 

Claim 22 

Gryglewicz et al . teaches further comprising means for providing 
balancing and scalability of the servers (Gryglewicz et al . , see 
at least, col. 5, lines 46-67 and col. 6, lines 1-7) . 

Claim 23 

Gryglewicz et al . discloses a plurality of servers (Gryglewicz 
et al . , see at least, col. 5, lines 46-55) connected to the 
public network (Gryglewicz et al . , see at least, col. 5, lines 
46-55) for providing a public web-based tax service that allows 
merchant subscribers to accumulate tax information, wherein 
different functions of the tax service are performed by 
different servers (Gryglewicz et al . , see at least, col. 5, 
lines 46-67; col. 6, lines 1-7; col. 8, lines 19-53); and means 
for providing security for information on the servers and 
information during transmission over the public network between 
the servers (Gryglewicz et al . , see at least, col. 15, lines 12- 
18: the examiner notes when SSL is used with HTTP is creates 
HTTPS (a secured HTTP connection) ) . 
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Gryglewicz et al . fails to specifically disclose wherein 
the security means including a tiered architecture, PKI 2-way 
authentication and authorization, HTTPS post, with XML document 
and SSH for remote administration. 

Traversat et al . discloses a tiered architecture comprising 
a firewall and computing devices (e.g. peers) (Traversat et al . , 
see at least, FIG. 20: the examiner notes proxy, firewall, and 
peers to be the levels of a tiered architecture) , PKI 2-way 
authentication and authorization (Traversat et al . , see at 
least, [0034]), HTTPS post (Traversat et al . , see at least, 
[0107] and [0442] : the examiner notes a HTTP tunnel is a secured 
form of HTTP communication), XML document (Traversat et al . , see 
at least, [0033] : the examiner notes XML format and endcoding) , 
and SSH for remote administration (see at least, [0442]). 

Therefore, it would have been obvious to one of ordinary 
skill in the art at the time the invention was made to modify 
the teachings of Gryglewicz et al . to include wherein the 
security means including a tiered architecture, PKI 2-way 
authentication and authorization, HTTPS post, with XML document 
and SSH for remote administration as taught by Traversat et al . 
One of ordinary skill in the art would have been motivated to 
combine the teachings in order to include a devices that can 
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enable the network to handle limited security (Traversat et al . , 
see at least, [0082]). 

Claim 25 

Gryglewicz et al . teaches wherein the security means also 
provides security for information transmitted between the 
servers and the merchant subscribers (Gryglewicz et al . , see at 
least, col. 15, lines 12-18). 

Claim 24 rejected under 35 U.S.C. 103(a) as being unpatentable 
over Gryglewicz et al . (US 6,993,052 Bl) in view of Traversat et 
al . (US 2002/0147771 Al) as applied to claim 21 above, and 
further in view of "Checking Your Server' s Heartbeat" by Harry 
Breisford (hereinafter Breisford) . 

Claim 24 

Gryglewicz et al . in view of Traversat et al . discloses all the 
claimed limitations except a means for recording the disk usage, 
access logging and heart beat monitoring. 

Breisford teaches a system monitor feature which allows an 
administrator to check a systems heartbeat, including logs, 
reports, alerts and charts (see page 1, line 15) . Breidford 
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further teaches these tools are used to take preventative care 
of a server (see page 6, line 14-15) . 

Therefore, it would have been obvious to one of ordinary 
skill in the art at the time the invention was made to modify 
the teachings of Gryglewicz et al . in view of Traversat et al . 
to include include a means for recording the disk usage, access 
logging and heart beat monitoring as taught by Breisford. One 
of ordinary skill in the art would have been motivated to 
combine the teachings in order take preventative care of the 
servers . 



Conclusion 

Applicant's amendment necessitated the new ground (s) of 
rejection presented in this Office action. Accordingly, THIS 
ACTION IS MADE FINAL. See MPEP § 706.07(a). Applicant is 
reminded of the extension of time policy as set forth in 37 
CFR 1 . 136 (a) . 

A shortened statutory period for reply to this final action 
is set to expire THREE MONTHS from the mailing date of this 
action. In the event a first reply is filed within TWO MONTHS 
of the mailing date of this final action and the advisory action 
is not mailed until after the end of the THREE-MONTH shortened 
statutory period, then the shortened statutory period will 
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expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1.136(a) will be calculated 
from the mailing date of the advisory action. In no event, 
however, will the statutory period for reply expire later than 
SIX MONTHS from the date of this final action. 

Any inquiry concerning this communication or earlier 
communications from the examiner should be directed to Asfand M. 
Sheikh whose telephone number is (571)272-1466. The examiner 
can normally be reached on M-F 8a-4:30p. 

If attempts to reach the examiner by telephone are 
unsuccessful, the examiner's supervisor, Ryan M. Zeender can be 
reached on (571) 272-6790. The fax phone number for the 
organization where this application or proceeding is assigned is 
571-273-8300 . 
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Information regarding the status of an application may be 
obtained from the Patent Application Information Retrieval 

(PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status 
information for unpublished applications is available through 
Private PAIR only. For more information about the PAIR system, 
see http://pair-direct.uspto.gov. Should you have questions on 
access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free) . If you would 
like assistance from a USPTO Customer Service Representative or 
access to the automated information system, call 800-786-9199 

(IN USA OR CANADA) or 571-272-1000. 

/Asfand M Sheikh/ 
Examiner, Art Unit 3627 



4/25/2008 

/F. Ryan Zeender/ 

Supervisory Patent Examiner, Art Unit 3627 



